Using request headers for passing the auth token

This PR allows an optional configuration to use request headers to pass the auth token instead of a param. This is the way oauth works. Its a bit cleaner and was a requirement for my application. May be useful for others as well. The default is to use params, if you do not set the optional parameters there is no change in functionality.